Risk management is not a single event performed at the kitchen table the night before a flight. It is an ongoing process that must evolve as conditions change in real time. The FAA's Risk Management Handbook (FAA-H-8083-2) discusses this reality through the 5P Check, a structured, repeatable decision-making model designed to help pilots evaluate five distinct risk domains at multiple points during every flight. For flight and ground instructors, the 5P Check is both a personal safety tool and a teaching framework — one that transforms vague notions of situational awareness into a concrete, auditable mental checklist students can actually apply under pressure.
Origin and Purpose
The 5P Check emerged from FAA research into the accident chain patterns that kill general aviation pilots. Studies consistently showed that most serious accidents were preceded by a cascade of poor decisions, not a single catastrophic judgment call. Pilots who survived close calls often reported that conditions had been deteriorating for some time but that they had no structured mechanism to recognize the accumulation of hazards. The 5P model directly addresses that gap. Rather than relying on intuition alone, it gives pilots a repeatable mental template to audit their flight environment at predictable intervals: before engine start, before takeoff, en route at significant decision points, and during the descent and arrival phase. Each audit takes only minutes, but the cumulative effect is a dramatically more aware and adaptive pilot.
The Five Ps in Depth
1. Plan
The Plan category encompasses everything related to the intended operation: the filed or intended route, current and forecast weather at departure, en route, destination, and alternate airports, NOTAM status, fuel requirements with legally required reserves, applicable airspace, and any regulatory constraints. Critically, the Plan is not static. A weather briefing valid at 0600 may be dangerously misleading by 1100 when convective development is underway. Each 5P review asks: Is the plan still valid given what I know right now? If the honest answer is no, the pilot must be prepared to divert, delay, or cancel — outcomes the model is designed to make psychologically easier because they flow from a structured process rather than a subjective gut feeling.
2. Plane
The Plane category addresses the aircraft as a system. This includes currency of required inspections (annual, 100-hour where applicable, ELT, transponder, pitot-static), airworthiness of all required equipment for the planned operation, status of any Minimum Equipment List (MEL) items or inoperative avionics, actual fuel on board versus planned fuel burn, and performance data for current density altitude, loading, and runway conditions. A common oversight is failing to recheck performance margins when conditions change en route — for example, a destination airport that was comfortably within gross weight limits at departure may present a density altitude problem after an extended fuel burn is replaced by a passenger who boarded at a fuel stop. The Plane check catches this kind of drift.
3. Pilot
The Pilot category is the human element, and the FAA explicitly links it to the IMSAFE checklist (Illness, Medication, Stress, Alcohol, Fatigue, Emotion/Eating) described in the Aeronautical Information Manual and reinforced throughout FAA-H-8083-2. Legal currency — completing the required takeoffs and landings, holding a current flight review — is necessary but not sufficient. The Risk Management Handbook distinguishes between currency and proficiency: a pilot may be legally current for night flight but not truly proficient for a night approach into an unfamiliar mountain airport under gusty conditions. At each 5P decision point, the pilot honestly asks whether his or her personal condition and skill level remain appropriate for the actual demands of the flight as it now exists, not as it was planned.
4. Passengers
General aviation is unique in that the pilot frequently flies with friends, family members, or colleagues who have personal stakes in the outcome of the flight. The Passengers category acknowledges that these relationships create real psychological pressure. A spouse who has scheduled an important event, a business associate expecting to close a deal, or a child who is excited and then becomes ill mid-flight can each distort the pilot's decision-making in subtle but dangerous ways. The FAA identifies external pressure as one of the most insidious contributors to continued-VFR-into-IMC accidents. By explicitly naming passengers as a 5P domain, the model gives pilots permission — and a framework — to recognize when social or emotional pressure is degrading aeronautical judgment. Instructors should role-play these scenarios: what does the pilot say when a passenger insists the weather looks fine from the ground?
5. Programming
The Programming category is unique to the modern cockpit. It refers specifically to the management of automated systems: GPS navigators, Flight Management Systems, autopilots, multi-function displays, and glass-panel suite configurations. Research cited in FAA-H-8083-2 and the Instrument Flying Handbook (FAA-H-8083-15) documents that automation surprise — the pilot's confusion about what mode the autopilot is in or what the GPS is actually navigating to — is a recognized hazard pattern. Programming asks: Is the avionics suite configured correctly for the current phase of flight? Does the pilot-in-command actually understand what the automation is doing and why? Is the active waypoint, approach, or altitude constraint what was intended? A misloaded approach at the destination is far less dangerous when caught during the en route 5P review than when discovered on final approach in IMC.
Applying the Model at Decision Gates
The structured power of the 5P Check comes from applying it at defined decision gates, not merely thinking about it abstractly. FAA-H-8083-2 describes applying the check at multiple points throughout a flight, including before engine start, during runup before takeoff, at a mid-point cruise check when conditions or plans may have evolved, and before beginning the descent and arrival sequence when workload and weather exposure increase again. Instructors should train students to verbalize the check or write it on a kneeboard card so it becomes habitual rather than aspirational. The habit of cycling through Plan, Plane, Pilot, Passengers, and Programming at predictable intervals embeds structured risk awareness into the pilot's standard operating procedure.
5P vs. PAVE: Know the Difference
The FAA teaches two overlapping but distinct pre-flight risk tools. PAVE (Pilot, Aircraft, enVironment, External pressures) is introduced in the Pilot's Handbook of Aeronautical Knowledge (FAA-H-8083-25) as a pre-flight hazard identification framework. The 5P Check extends that concept into an in-flight, recurring decision model. Both are risk management concepts referenced in FAA guidance and study materials for flight instructor certificates. The key distinction: PAVE is primarily a departure-phase tool, while the 5P Check is explicitly designed for continuous application throughout the flight. Confusing the two on an exam — or in practice — misses the recurring, dynamic nature that makes the 5P model valuable.
Key Numbers and Rules
- Four minimum review points: pre-engine start, pre-takeoff, en route, and pre-descent/arrival.
- IMSAFE (Illness, Medication, Stress, Alcohol, Fatigue, Emotion/Eating) is the FAA-standard self-assessment tool embedded in the Pilot (third P) category.
- 14 CFR 91.3 places final authority and responsibility for all go/no-go decisions on the pilot-in-command — the 5P model is the structured mechanism for discharging that responsibility.
- Programming applies to automated cockpit systems, not paper flight planning — a distinction that appears as a distractor on knowledge exams.
- The 5P model is discussed in FAA-H-8083-2 and related FAA safety materials; flight instructor applicants should be familiar with this reference.
Common Test Traps
- One-and-done fallacy: Distractors often suggest that a pre-departure risk assessment is sufficient. The correct answer is always that the 5P Check is applied repeatedly at multiple decision points.
- Programming confusion: Students mistake this category for pre-flight route planning. It specifically addresses in-flight avionics and automation management.
- Passengers are not neutral: Some distractors frame passengers as irrelevant to pilot decision-making. The 5P model explicitly treats passenger-induced pressure as a quantifiable risk factor.
- Currency vs. proficiency: A question about the Pilot category may test whether students understand that legal currency does not equal proficiency. The 5P Check demands an honest assessment of actual skill for the conditions at hand.
- 5P vs. PAVE on the same exam: Both tools are risk management concepts taught for flight instructor preparation. Knowing which categories belong to each model — and understanding that the 5P Check is the recurring, in-flight version — is essential for avoiding cross-contamination errors.